Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/767555-cc38-4df3-bcf7-2b1e342b2b24/1/CF_4fI5DFQfyR3NH39briaccWsE.roa
File: CF_4fI5DFQfyR3NH39briaccWsE.roa (raw, json)
Hash identifier: x1knXDAEV+9RkZUG8ii2jk6coRrblKvokilSTR7AJAc=
Subject key identifier: 08:5F:F8:7C:8E:43:15:07:F2:47:73:47:DF:D6:EB:89:A7:1C:5A:C1
Certificate issuer: /CN=3c98aeebc2d6c06c169bac30306a5e9b68426c59
Certificate serial: 0191B2D533F659DC31E8391074269B527ECD
Authority key identifier: 3C:98:AE:EB:C2:D6:C0:6C:16:9B:AC:30:30:6A:5E:9B:68:42:6C:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PJiu68LWwGwWm6wwMGpem2hCbFk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/767555-cc38-4df3-bcf7-2b1e342b2b24/1/CF_4fI5DFQfyR3NH39briaccWsE.roa
Signing time: Mon 02 Sep 2024 13:03:22 +0000
ROA not before: Mon 02 Sep 2024 13:03:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 31631
IP address blocks: 195.167.138.0/24 maxlen: 24
195.167.181.0/24 maxlen: 24
195.167.182.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:b2:d5:33:f6:59:dc:31:e8:39:10:74:26:9b:52:7e:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c98aeebc2d6c06c169bac30306a5e9b68426c59
Validity
Not Before: Sep 2 13:03:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=085ff87c8e431507f2477347dfd6eb89a71c5ac1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:30:09:ed:5f:1d:19:41:fa:28:e5:65:31:9e:
fc:6f:02:bc:a0:50:07:cf:08:87:3b:fa:a7:69:93:
dc:89:6d:f7:d5:83:d7:be:9a:53:ae:f7:55:7e:4f:
30:b9:a6:d2:7b:f7:58:16:5e:5e:02:69:95:a0:3c:
ee:bb:6e:ca:f8:4a:f5:79:bc:5f:d0:fd:1d:5a:ad:
53:bf:f4:86:c1:98:5d:90:af:83:e7:32:bd:a8:1d:
b0:a2:91:10:c5:13:1d:de:cd:e9:8b:2e:34:8d:eb:
25:b4:ab:9e:7d:ff:6a:0c:e8:67:38:91:70:a4:ff:
79:a0:de:81:74:c7:e0:03:a4:1d:a9:65:f1:a4:b7:
cc:c1:96:4d:c8:05:49:2e:ed:bf:37:ef:66:ee:d1:
86:b6:be:d0:87:27:f5:27:4a:d4:f4:df:71:df:39:
16:82:8b:e7:f6:11:21:57:4d:fe:6a:17:5d:27:1f:
9c:cc:df:21:51:a4:3c:10:63:9f:eb:bc:2f:cb:a8:
06:e2:46:5a:25:89:8b:dc:9a:5d:b5:3a:da:1e:1f:
43:14:14:bf:17:87:a5:a8:17:9d:be:0a:7a:f1:e2:
e4:3d:30:f0:aa:7a:63:db:a1:66:6a:47:f8:08:49:
49:7e:0b:ca:1d:22:f2:3c:b1:cc:fb:c7:ec:b5:33:
05:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:5F:F8:7C:8E:43:15:07:F2:47:73:47:DF:D6:EB:89:A7:1C:5A:C1
X509v3 Authority Key Identifier:
keyid:3C:98:AE:EB:C2:D6:C0:6C:16:9B:AC:30:30:6A:5E:9B:68:42:6C:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PJiu68LWwGwWm6wwMGpem2hCbFk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/767555-cc38-4df3-bcf7-2b1e342b2b24/1/CF_4fI5DFQfyR3NH39briaccWsE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/767555-cc38-4df3-bcf7-2b1e342b2b24/1/PJiu68LWwGwWm6wwMGpem2hCbFk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.167.138.0/24
195.167.181.0-195.167.182.255
Signature Algorithm: sha256WithRSAEncryption
1f:10:44:cc:6f:d8:4c:07:59:68:c2:09:6c:76:bb:ce:33:10:
2c:da:8b:22:3c:13:b2:09:27:a6:76:fc:b0:84:f2:aa:a1:68:
70:f8:e6:be:c7:96:8d:72:e6:7f:6a:39:c3:be:d1:91:7c:16:
ec:01:8f:b4:53:4f:45:4c:08:b7:a7:c9:b2:98:89:b0:dd:7a:
8a:1b:b0:c8:81:df:a5:6f:51:97:87:57:25:17:0e:37:1c:2e:
5e:9f:e1:99:05:b7:5d:02:df:7c:19:1c:0b:41:a3:6e:27:1d:
3b:fd:48:74:22:e3:64:31:c4:73:80:05:04:dd:6d:84:58:2e:
43:01:40:40:05:34:18:e3:03:85:5f:2b:d2:c5:83:6e:68:6f:
a6:5f:d7:ce:cd:37:97:4b:94:fc:7e:c9:0f:65:bc:db:97:69:
ba:6d:af:f3:15:86:58:fc:68:8b:0a:2e:1f:06:13:75:e7:94:
45:a9:b3:ce:46:6b:eb:f5:71:99:52:3e:8d:91:0f:93:2a:cc:
c4:0c:16:4e:25:f2:bd:b9:de:02:7f:d7:77:c7:4e:15:33:93:
ec:df:4c:47:63:b3:72:e2:46:ca:5c:8b:5b:32:24:d7:57:86:
24:0d:bf:9e:26:df:d9:8f:4a:88:37:25:61:af:5e:41:00:d4:
c3:6c:b3:7f
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:52:28 2025 by rpki-client